$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa File: fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa (raw, json) Hash identifier: i8YVPHuGOjfR8rbk3Mkw/Hgsszjof/1FF4a+lUUTBtk= Subject key identifier: C1:8A:D5:60:76:CE:E3:2A:EC:76:2B:1C:C3:30:2A:6A:7F:A5:55:04 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584988C21FCFEB51E8D80A5E02E0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa Signing time: Tue 15 Apr 2025 12:34:54 +0000 ROA not before: Tue 15 Apr 2025 12:34:54 +0000 ROA not after: Mon 14 Jul 2025 12:34:54 +0000 asID: 397197 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:c2:1f:cf:eb:51:e8:d8:0a:5e:02:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Apr 15 12:34:54 2025 GMT Not After : Jul 14 12:34:54 2025 GMT Subject: CN=bc6c827d-63ee-4ca2-8dcf-ec6762475601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:ae:17:32:2d:b0:39:b2:e5:1d:98:a6:2a: f0:a3:33:3a:3f:7b:23:a3:4a:87:08:05:91:b4:86: fd:d6:a0:c1:73:ed:f5:80:df:ab:c5:0f:60:ee:b2: f9:16:0a:0d:72:38:d6:5f:d0:24:53:bd:fc:b5:8f: 4b:92:26:12:cc:f5:9e:11:be:53:b2:a5:02:13:d7: f2:70:03:ec:59:23:a3:93:87:40:6c:a1:ee:da:48: 03:d1:0b:29:07:f0:ca:5d:94:46:44:f1:66:f3:2c: 9b:ab:ce:52:28:45:69:a8:92:1d:ae:16:68:fc:b5: 49:d1:19:9c:cb:43:c1:89:25:1b:52:7f:00:29:93: 1b:af:eb:0a:c5:1a:f3:ba:33:b9:e8:bf:93:25:6d: d5:b8:83:a7:ac:d9:6f:00:5c:a1:cd:40:8d:6f:ca: 4d:85:06:0c:b2:57:a4:7b:87:62:95:53:af:fb:e8: c6:28:a1:dc:21:1f:c8:79:1b:d2:5c:3c:dc:a8:74: ea:ac:9c:d4:fc:4e:d8:1d:5a:20:b7:43:e9:01:2f: 45:00:d7:3e:d6:1f:89:67:d3:0f:32:29:e7:90:f1: e9:5f:32:55:9b:1c:31:61:91:92:6e:c1:33:13:d5: 8b:24:7e:b6:2d:ce:b2:1a:22:0c:2d:d1:ae:1c:2a: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8A:D5:60:76:CE:E3:2A:EC:76:2B:1C:C3:30:2A:6A:7F:A5:55:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/fd44e49e-410e-3d72-a36b-0748b5f6fab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:2f:a6:7e:42:21:b7:26:84:db:55:b2:89:23:71:25:e9:2f: f7:c9:12:fd:1c:42:aa:5e:f6:26:cc:1a:6b:df:bc:8c:a3:b3: ad:1a:a4:43:4c:32:df:d1:cb:22:3d:48:04:9c:22:78:36:72: 2a:9d:36:e3:e1:ed:f0:b3:f1:68:be:f0:df:50:42:3a:b0:e3: 57:6a:9b:df:20:df:8a:b1:b1:19:9e:bf:a1:a0:fc:44:25:cb: 8f:02:1e:3b:f1:05:fb:d3:20:b2:6f:83:50:7b:3f:b9:36:40: ad:b9:66:d0:b7:fa:67:df:5e:ac:85:0a:ab:dd:a0:52:a1:4f: f8:3b:bf:61:c7:80:a4:f4:49:ab:b1:29:e5:95:a2:ef:5f:95: 95:f6:34:5b:31:92:4a:25:a0:3e:1c:d9:44:ac:e0:90:e2:88: 5c:0e:ff:60:96:5b:09:c7:c4:2f:2c:c6:d4:e7:95:b4:1d:17: 7c:eb:49:98:2a:45:2f:74:77:01:94:5f:1f:8b:f8:e2:cf:d8: 7d:cb:7e:54:13:96:0c:3c:b8:5a:9c:ff:14:84:5a:7f:92:89: 12:7a:b0:c4:a3:73:2d:95:28:09:a3:12:d8:58:e7:f1:0c:bd: 10:96:71:ee:76:07:21:08:fb:ac:6f:50:99:31:61:94:1d:09: e8:ab:3b:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmIwh/P61Ho2ApeAuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDQxNTEyMzQ1NFoXDTI1MDcxNDEyMzQ1NFowLzEtMCsGA1UEAxMk YmM2YzgyN2QtNjNlZS00Y2EyLThkY2YtZWM2NzYyNDc1NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jOuFzItsDmy5R2YpirwozM6P3sjo0qHCAWR tIb91qDBc+31gN+rxQ9g7rL5FgoNcjjWX9AkU738tY9LkiYSzPWeEb5TsqUCE9fy cAPsWSOjk4dAbKHu2kgD0QspB/DKXZRGRPFm8yybq85SKEVpqJIdrhZo/LVJ0Rmc y0PBiSUbUn8AKZMbr+sKxRrzujO56L+TJW3VuIOnrNlvAFyhzUCNb8pNhQYMslek e4dilVOv++jGKKHcIR/IeRvSXDzcqHTqrJzU/E7YHVogt0PpAS9FANc+1h+JZ9MP MinnkPHpXzJVmxwxYZGSbsEzE9WLJH62Lc6yGiIMLdGuHCoVOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMGK1WB2zuMq7HYrHMMwKmp/pVUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmQ0NGU0OWUtNDEwZS0z ZDcyLWEzNmItMDc0OGI1ZjZmYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0vpn5CIbcmhNtVsokjcSXpL/fJEv0cQqpe9ibMGmvfvIyjs60a pENMMt/RyyI9SAScIng2ciqdNuPh7fCz8Wi+8N9QQjqw41dqm98g34qxsRmev6Gg /EQly48CHjvxBfvTILJvg1B7P7k2QK25ZtC3+mffXqyFCqvdoFKhT/g7v2HHgKT0 SauxKeWVou9flZX2NFsxkkoloD4c2USs4JDiiFwO/2CWWwnHxC8sxtTnlbQdF3zr SZgqRS90dwGUXx+L+OLP2H3LflQTlgw8uFqc/xSEWn+SiRJ6sMSjcy2VKAmjEthY 5/EMvRCWce52ByEI+6xvUJkxYZQdCeirO64= -----END CERTIFICATE-----Generated at Sun Apr 27 17:41:39 2025 by rpki-client